Alekhya Nishtala

SOC Analyst and Vulnerability Management Analyst with 4 years of experience in security incident detection, triage, investigation, and vulnerability assessment within a large enterprise managed security services environment, operating within a multi-client delivery model. Prioritizes and escalates incident and vulnerability findings, coordinating remediation across infrastructure, application, and third-party vendor teams. Consistently maintains 99%+ SLA compliance across all incident severity levels.

Technology Analyst - Security Operations Analyst - Infosys Ltd - Hyderabad, Telangana

(2022-08 - 2026-04)

• Triaged 100+ security alerts daily across SIEM (Splunk, NGSIEM), CrowdStrike Falcon, and Palo Alto firewall logs, identifying phishing attempts, malware detections, suspicious logins, endpoint threats, and anomalous network activity with 99%+ SLA adherence.
• Led 100+ endpoint security investigations using CrowdStrike Falcon, tracing malware detections, suspicious process executions, and anomalous user behaviors to root cause.
• Investigated Azure Security Center alerts for suspicious logins, anomalous API activity, and identity-based threats across cloud workloads, escalating and remediating confirmed incidents.
• Investigated phishing campaigns, malicious attachments, and Business Email Compromise (BEC) attempts using Proofpoint and Abnormal Security, coordinating containment and remediation with internal teams.
• Actively monitored threat intelligence feeds, CVE advisories, and security research publications to stay current with emerging attack techniques, adversary TTPs, and newly disclosed vulnerabilities, applying relevant insights to ongoing detection and incident response activities.
• Performed IOC enrichment and threat validation using VirusTotal, Talos, AbuseIPDB, WHOIS, and Palo Alto AutoFocus to support incident investigation and threat analysis.
• Analyzed recurring false positive patterns in daily security alerts and collaborated with the security engineering team by providing recommendations that supported security use case enhancements and detection tuning initiatives.
• Prioritized and escalated security incidents based on severity, business impact, and risk level, coordinating timely cyber incident response and remediation activities with cross-functional teams.
• Monitored and reviewed investigations handled by L1 SOC analysts, providing guidance on alert validation, escalation quality, and adherence to SOC best practices and operational procedures.
• Created detailed incident reports, threat summaries, and knowledge-sharing documentation to support SOC processes and team awareness.

Vulnerability Management (VM) Infrastructure Analyst - Infosys Ltd - Hyderabad, Telangana

(2022-08 - 2026-04)

• Performed vulnerability assessments across 27,000+ endpoints and 60+ DMZ-facing applications using Tenable Nessus, spanning Windows and Linux environments.
• Participated in scheduled vulnerability scanning activities across internal, external, DMZ, and Domain Controller (DC) environments, sharing scan result reports with cross-functional teams.
• Prioritized vulnerability findings using CVSS severity, asset criticality, and business impact, incorporating threat intelligence and known exploit activity context to refine prioritization beyond CVSS scoring alone.
• Tracked remediation timelines across critical and high-severity findings to accelerate resolution of vulnerabilities within defined SLA windows.
• Recommended and implemented improvements to vulnerability scan execution, remediation tracking, and reporting processes, improving operational efficiency and reducing mean time-to-remediate for high-severity findings.
• Provided suggestions on automation scripts to support scan scheduling and execution, in addition to conducting scans directly.
• Troubleshot scan execution issues and coordinated with teammates to identify and resolve scanning errors, ensuring consistent vulnerability coverage.
• Collaborated with infrastructure, application, patch management, and third-party vendor teams to prioritize and coordinate remediation activities, providing recommendations on remediation feasibility aligned with SLA timelines.
• Tracked and reported on vulnerability remediation progress to internal stakeholders, providing metrics on open findings, SLA compliance, and overall risk reduction trends.
• Monitored external attack surface exposure using BitSight, tracking risk trends and contributing to periodic reporting on the organization's security posture.

B.Tech - Computer Science Engineering - Andhra Loyola Institute of Engineering and Technology (2018-06 - 2022-07)